VirtualBox on MACBOOK
https://www.reddit.com/r/Pentesting/comments/10tov76/virtualbox_on_macbook/

<!-- SC_OFF -->Hey guys , Im switching from windows to Mac and I have a kali vm exported from my old computer , after installing virtual box I noticed there is a lot of issues on the display and some lag between the host and guest machine , any help or guidance , also same issues on a fresh new parrot os , any help ? <!-- SC_ON --> submitted by /u/DIABLOO8080 (https://www.reddit.com/user/DIABLOO8080)
[link] (https://www.reddit.com/r/Pentesting/comments/10tov76/virtualbox_on_macbook/) [comments] (https://www.reddit.com/r/Pentesting/comments/10tov76/virtualbox_on_macbook/)

Top 21 Tools for Penetration Testing

Penetration testing, also known as pen testing, is an important aspect of cybersecurity that helps organizations identify and address…Continue reading on Medium »
Read more...

Top 21 Tools for Penetration Testing
https://medium.com/@diegomayben/top-21-tools-for-penetration-testing-2bb9716ee224?source=rss------bug_bounty-5

Penetration testing, also known as pen testing, is an important aspect of cybersecurity that helps organizations identify and address…Continue reading on Medium » (https://medium.com/@diegomayben/top-21-tools-for-penetration-testing-2bb9716ee224?source=rss------bug_bounty-5)

hacking: security in practice
Convert regular USB or SD/MicroSD card to a USB Rubber Ducky.

Similar to an earlier post, what would someone need to convert a regular USB or SD/MicroSD card to a USB Rubber Ducky.

I've seen several videos and instructions but wanted more first-hand experiences or recommendations on github or other resources to use.

Alternatively, has anyone made their own "OMG cable"? How did it go? And what did you need to do it?

Lastly, cost wise, what's more effective. Purchasing the pre-made devices, or building your own? Taking into account all of the aspects (security, lack or excess of potentially tracing purchases, knowledge gained and used, time, actual cost, etc.) as "cost".

submitted by /u/timeflux123
[link] [comments]

hacking: security in practice
4digit code bot

Is there some kind of program for windows that quickly cracks a 4 digit code for you?

submitted by /u/pqndqpewds
[link] [comments]

hacking: security in practice
Affordable 5g Capable Wifi Adapters

Hey guys, getting back into playing around with Kali while I have some time away from work. Last time I was learning I was using an ALFA AWUS036NHA (ol faithful) but alas it is not capable of 5g band and now that basically everything is running on 5g I need a new adapter that capable of packet injection.

Most of the ones I have found so far are more expensive that I would prefer to pay for the amount il use it, so im just looking for suggestions on cheaper units. Any suggestions appreciated. Thanks!

submitted by /u/National-Change-1407
[link] [comments]

hacking: security in practice
Weevely inside of index.php

I can't make the connection. If I make a new file only with weevely backdoor it works fine but if I try to copy and paste the code inside of a existing .php file it doesn't work although the original part of the .php file stills works.
For example if I put the backdoor inside index.php I cannot get the connection through weevely but on the website the index.php its working fine.

anyone ever managed to do it?

submitted by /u/AcidoFueguino
[link] [comments]

hacking: security in practice
Does a VPN or TLS Prevent a Kernel/OS Exploit?

Say someone is using Linux Mint but with a VPN and kill-switch on. Say an adversary is targeting this person for persistent malware and exfiltration of data. Say the adversary has at least one kernel exploit or OS exploit to use on the target but doesn't have access to the end server or web browsing activity of the target; the attacker only has access to the Wifi network or MITM position. Does their kernel/OS exploit work against the target if the target's traffic is encrypted with a VPN? Same question for just basic TLS/SSL when browsing the web.

submitted by /u/LanaDoyle
[link] [comments]

hacking: security in practice
Anyone know of any tools similar to the flipper zero

Flipper zero is either out of stock or people are selling it for more than double its retail, anyone know of any tools with similar features? Thanks

submitted by /u/PokeMewTCG
[link] [comments]

hacking: security in practice
Vdb files?

Hey there I'm trying to figure out the contents of a file in .vdb (it should be a database file) however whenever I try to open the contents I amgreeted with garbled text and no clear formation

Has anyone had experience with vdb files?

submitted by /u/HeroinPigeon
[link] [comments]

hacking: security in practice
BadUSB/Rubber Ducky reverse shell ERROR

I have tried multiple scrips but for some reason they all dont work, i dont know if im picking the wrong IP, the wrong networking for my virtual machine or what. But can someone please give me a script that might work, I have tried scripts from hak5 but they dont seem to work.

Scripts I've used: https://github.com/hak5/usbrubberducky-payloads/tree/master/payloads/library/remote_access/Netcat-Reverseshell-On-Log-In

https://github.com/FreeLesio/Rubber-Ducky-Reverse-Shell

I seem to get this error when using these:

ConPtyShellException: [-] ConPtyShellException: WSAConnect failed with error code: 10061

at ConPtyShell.connectRemote(String remoteIp, Int32 remotePort)

at ConPtyShell.SpawnConPtyShell(String remoteIp, Int32 remotePort, UInt32 rows, UInt32 cols, String commandLine, Boolean upgradeShell)

at ConPtyShellMainClass.ConPtyShellMain(String[] args)

With this script https://github.com/OwNuT/Rubber-Ducky-Scripts/blob/main/ReverseShell/payload everything seems to work fine on the victim machine but it says its connected to local host and when I go on attacker machine (kali linux VM) nothing seems to be connected.

(SORRY FOR SO MUCH I JUST REALLY WANT THIS TO WORK OUT)

​

EDIT: IT'S FINALLY WORKING!

submitted by /u/SnooCookies9629
[link] [comments]